One-round asymmetric password-based authentication and key sharing method with resilience to pre-computation attacks

Abstract

The invention relates to an one-round password-based authentication and key sharing method with resilience to pre-computation attacks and with communication round efficiency, and the method includes: allowing a client to generate a first hash key, a second hash key, and a random number exponent that is a private salt by using a public parameter and a password and to register the PW-authentication value information including a commitment value generated by the first hash key, the second hash key, and the random number exponent in a server; allowing the client to generate the second hash key by using the password, to generate a client random number exponent, to generate a client temporary public key by using the second hash key and the client random number exponent, and to deliver the client temporary public key to the server; allowing the server to generate a server random number exponent, to generate a ciphertext of a server temporary public key by using the server random number exponent and the PW-authentication value information, and to deliver the ciphertext to the client; allowing the client to generate the first hash key by using the password, to decrypt the ciphertext, and to acquire the server temporary public key; allowing the client to generate the temporary common key by using the server temporary public key and the client random number exponent; and allowing the server to generate the temporary common key by using the client temporary public key and the server random number exponent.